Keep your website running. Know what support covers.
Website Maintenance & Security
Plan for backups, updates, security reviews, hosting coordination, and small feature changes with clearly defined responsibilities and pricing.
What Does Your Website Need After Launch?
Website development completion does not mean that new features need to be added every year; most businesses need to update banners, product and company information, and ensure the continued stable operation of existing systems. Even if the functionality remains unchanged, the hosting environment, program version, third-party services, and cybersecurity threats will still change, so maintenance work should be planned separately from feature development.
Two Maintenance Plans. Clearly Defined Scope.
The following are planning budgets for monthly subscriptions. The basic plan is based on a small business website; the SME plan is based on a medium-sized business website. Detailed pricing is subject to project discussion and confirmation based on website size, system complexity, maintenance scope, and functional adjustments required. Monthly working hours or number of tasks, execution frequency, support conditions, and taxes are all subject to a written quote and contract. Existing systems requiring repair or upgrades will incur a separate one-time implementation fee.
Essential Website Maintenance
Suitable for small businesses' business websites, with stable functions and content updated by the business itself.
Routine checks on the availability and key functions of existing websites.
Website program, software package versions, and security update assessment.
Backup checks and restore availability verification within the agreed scope.
Reminders and coordination regarding expiration dates for hosting, domains, and SSL certificates.
Records of handling, interpreting and processing of anomalies within the existing delivery scope.
Excludes: new features, interface redesign, asset design, large-scale content updates, and major version upgrades. Whether security patching and restoration are included is specified in the price quote.
Monthly planning budget: TWD 1,500–3,000/month
Based on routine maintenance of a small website; detailed pricing will be confirmed in your quote and confirmed based on the actual situation and scope of maintenance.
Business Maintenance & Small Updates
Based on a medium-sized business website, this includes maintenance support and minor tweaks to existing features.
Includes the services in the Essential Website Maintenance plan.
Includes a limited monthly allowance for small changes to existing features. Hours or task counts are agreed in writing.
Minor adjustments to existing form fields, search criteria, or backend prompts are required.
Before making fine-tuning, confirm the scope of impact; after completion, test and record.
Regularly compile a list of completed matters and follow-up recommendations.
Excludes: adding new modules, integrating payment and ERP systems, database restructuring, major system redesigns, and large-scale data processing. Requirements involving changes to core processes will be evaluated separately.
Monthly planning budget: TWD 5,000–12,000/month
Based on the maintenance needs of a medium-sized business website; detailed pricing will be confirmed in your quote and confirmed based on system complexity and agreed-upon adjustments.
Basic Fee Items: First, distinguish between fixed expenses and on-demand expenses.
Fee items
Billing method reference
Scope to be confirmed
Initial Website and Hosting Assessment
One-time setup; quoted separately
Program version, account permissions, host, backup and existing issues; websites not built with DFocus need to have their takeover status confirmed first.
Hosts, Domains and SSL
Contract renewal based on supplier cycle / billing based on operation
Hosting specifications and traffic, domain renewal, credential authorization and update procedures; free SSL does not mean no renewal or management is required.
Maintain subscription
Monthly subscription, payment cycle according to contract
The quota for inspection, updates, backups, and support is specified; annual payment methods and discounts are to be discussed separately.
Security testing and vulnerability patching
Quote based on testing scope, risks, and repair work
Third-party scanning, manual interpretation, repair, and retesting are conducted separately to confirm which items are already included in the subscription.
Major upgrades and accident recovery
Case valuation
For major PHP/framework version upgrades, migrations, intrusion cleanups, or data recovery, first confirm the extent of backup and recoverability.
Third-party services
Based on supplier authorization or usage
Avoid confusing SMS messages, emails, payments, APIs, and plugin licenses with maintenance fees.
Content and visual updates
Self-operation / per item / monthly design package
Material design, image retouching, copywriting, and uploading services are available at a separate price depending on the scope of the work.
Feature tweaks and new development
Quote within the proposed limit or in a separate proposal
Estimate working hours first; any excess, cross-module, or new features must be confirmed before execution.
Maintenance Fees and Enforcement Rules
First, take stock, then take over: confirm the system's source, authorization, scope of modification, and deployment method; existing technical debt is not pre-included in the subscription fee.
A written scope should specify the monthly limit, routine frequency, response method, service period, and price quote including/excluding tax.
Fine-tuning is done by first estimating and then proceeding: the principle is to make minor changes within the existing structure; for amounts exceeding the limit, a quote is provided first, and arrangements are made after the client confirms the quote.
Your monthly allowance covers a defined amount of work. Rollover, the minimum subscription term, and pause or cancellation rules are set out in your contract.
Third-party fees should be clearly listed: Whether hosting, domain, license and usage fees are collected on your behalf or calculated separately should be listed separately in the quote.
Backup before update, verification after update: When changes are made before going live, confirm the backup and the necessary response methods, and avoid the agreed critical operating periods.
Warranty and maintenance are separated: original delivery defects, environmental changes and new requirements are determined separately to avoid double billing or unclear responsibility.
What should a maintenance record show?
A useful maintenance record should make the work traceable without exposing credentials, private customer data or exploitable technical details. Agree on the record format and review schedule as part of the maintenance scope.
Date, agreed website/function and reason for the check.
Observed issue, affected scope and severity assessment.
Action taken, responsible team and any required approval.
Retest result, remaining items and the next review date.
Availability monitoring, backup checks, updates, vulnerability scanning and penetration testing are different activities. Specify which are included, their frequency and who handles the findings. AI can help organize observations and alerts; specialist review and authorized corrective work still need a clear owner.
Banner updates and daily product updates can usually be handled by the company itself.
The existing backend features for image replacement, product listing/delisting, and text modification can be handled by internal staff; these operations do not necessarily require a complete website overhaul. It is recommended to assign a content manager, maintain clear account permissions and image specifications, and minimize accidental deletions and layout distortions.
If a company has a budget but lacks design staff, DFocus can assist in creating banners, event visuals, product images, and brand materials, which the company can then upload. Alternatively, they can arrange for updates. Monthly design packages , graphic design support plans , and brand design packages are available for consideration .
Cybersecurity Maintenance: From Testing to Patching and Retesting
Attack methods and known vulnerabilities are constantly evolving; even without new features, the website may still be at risk due to outdated programs, software packages, or permission settings. Routine checks are conducted according to the website's risk management plan, and reassessments are performed after major updates or high-risk vulnerability announcements. Independent third-party testing may be commissioned when necessary.
Confirm the authorization, scope, backup, and detection period.
Perform the agreed-upon vulnerability scanning and necessary manual verification.
False alarms should be identified and remediation should be arranged based on the risks, impacts, and dependent conditions.
Verify the functionality and vulnerability patching results, and retain records.
Scanning, patching, retesting, and penetration testing are different tasks; quotes and deliverables should be confirmed separately for each. No single test can guarantee a website will be permanently immune to intrusion.
Advantages of partnering with hosting providers: Both hardware and software have professional teams.
DFocus has long-term partnerships with URL Hosting and Zhanguoce, integrating hosting hardware resources and website software development capabilities. Businesses can submit issues through a single point of contact at DFocus, and we assist in clarifying the causes, notifying the responsible team, and tracking progress, reducing repeated communication across vendors.
The hosting infrastructure, data center, and co-hosting environment are handled entirely by the professional staff of the cooperating hosting provider within their service scope; website program and application issues are handled by the corresponding development teams. For projects hosted by URL Hosting, if any hardware anomalies are involved, the 24/7 data center team members will be immediately notified for troubleshooting and repair.
For major issues with your hosting or website, you can report them via email 24/7 to coordinate with the relevant team for emergency handling. General inquiries are available from 13:00 to 20:00; actual processing priority, repair time, and warranty coverage will be determined based on the cause of the issue, the hosting provider's service agreement, and the project contract.
DFocus Development Technology, Integration Costs, and Project Completion Deliverables
From technology selection and cost scope to corporate ownership, first understand the engagement and delivery methods of DFocus customized projects.
What technologies does DFocus use to develop customized e-commerce? Is it mandatory to use WordPress/WooCommerce?
DFocus offers independent development capabilities for environments such as PHP, .NET, ASP, and ASP.NET, and integrates JavaScript, CSS, and HTML. PHP projects can utilize frameworks such as Laravel, Symfony, CodeIgniter, and ThinkPHP, or be developed using a framework-free approach. Custom e-commerce is not limited to WordPress/WooCommerce installations or extensions; the actual technology selection, existing components, and scope of customization will be determined based on project requirements and the deployment environment.
How are DFocus payment and logistics integration fees calculated? Does the quote include SSL?
Payment and shipping integrations are quoted around your provider, API, store size, and checkout flow. For many small e-commerce projects, the integration work is typically TWD 30,000–50,000. That is the integration budget, not the price of the entire website. Transaction fees and provider subscriptions are separate. If you need an SSL certificate, we can help with the application and installation; you pay the certificate cost. See our Website Maintenance & Security page for maintenance plans, included change allowances, and additional charges. Final scope and pricing are confirmed in your quote.
Will DFocus deliver the source code, database, and host management rights after project handoff?
Yes. At handoff, you receive the complete project source code, database, and the hosting-management access included in your hosting plan. Your data stays on the hosting account your business leases; DFocus does not withhold it to prevent you from moving providers. We coordinate with your hosting provider. On shared hosting, management access does not necessarily include server root access.
Who owns the DFocus custom project?
We sign project-ownership documents at completion to confirm your business owns the work it has purchased. Source code, the database, and hosting access are handed over against the delivery checklist. Open-source frameworks, third-party packages, and licensed stock materials keep their own license terms; those rights are listed separately from ownership of your custom project.
How much does DFocus's customized e-commerce service cost for a year of ongoing maintenance? What adjustments are included?
Maintenance costs vary depending on website size, transaction process, number of connections, and support requirements; a single price does not cover all e-commerce platforms. The existing basic plan is based on a small brand website, with a reference monthly fee of TWD 1,500–3,000; the SME plan is based on a medium-sized business website, with a reference monthly fee of TWD 5,000–12,000, which may include minor adjustments to existing functions within the agreed-upon budget. Converted over twelve months, these are approximately TWD 18,000–36,000 and TWD 60,000–144,000 respectively, and are not fixed annual fees for e-commerce platforms. Labor hours or number of items, inspection frequency, taxes, excess fees, and excluded items must be confirmed in the contract; new modules, major upgrades, and new connections will be estimated separately.
Once the website is running stably, let AI take over the repetitive tasks.
In addition to website maintenance, we can also plan AI sales, AI-PM, and image and short-form video workflows for SMEs. From local hardware and model installation to data and tool integration, we can first pilot the program in a single department and then expand it based on the results.
This discussion focuses on companies with approximately 10–50 employees and provides a basic setup and hardware budget reference. Actual configuration, costs, and acceptance will be confirmed in your quote based on requirements and are not included in the general website maintenance subscription.
What other annual fees will there be after the website is completed?
Common items include hosting and domain renewals, SSL certificate updates, backups, system updates and maintenance staffing, and third-party services billed on a usage basis. Whether vulnerability scanning, patching and retesting, major version upgrades or incident recovery are included must be confirmed item by item according to the plan and contract.
What are the differences between the basic plan and the SME plan?
The basic plan is based on a small business website, with a reference monthly fee of TWD 1,500–3,000, focusing on routine checks, security update assessments, backups, and anomaly coordination. The SME plan is based on a medium-sized business website, with a reference monthly fee of TWD 5,000–12,000, and may include minor adjustments to existing functions. Detailed pricing must be confirmed in your quote and confirmed based on the website size, system complexity, and maintenance requirements, and a written agreement must be made regarding working hours or number of tasks, execution frequency, taxes, and exclusions.
What is minor feature tuning?
For example, adjustments can be made to existing form fields, existing search criteria, or existing backend prompts, provided that the core architecture and data flow remain unchanged. Adding new modules, payment integration, database restructuring, layout redesign, and large-scale data processing are not considered minor adjustments and require separate pricing.
Can the subscription fee be changed indefinitely, or can it be carried over to the next month?
No unlimited modifications. The scope and estimated working hours for each task must be confirmed first; any work exceeding the agreed-upon limit requires prior quote confirmation. Whether unused credit is deferred, the minimum subscription period, and the cancellation method are all subject to the contractual agreement; there is no pre-set automatic accumulation.
Do I have to pay a maintenance fee when changing a banner or listing products?
If the existing backend already provides the relevant functions, businesses can have their internal staff operate them independently; material design, product photography, copywriting, or outsourcing of product listing will be confirmed separately. For businesses with a budget but lacking design staff, monthly design support plans or monthly graphic design support plans are available.
Who is responsible for handling hosting infrastructure issues?
DFocus assists with integrated reporting and tracking. Hosting hardware, data center, and managed environment are handled by professionals from the partner hosting provider within their service scope; website programming is handled by the corresponding development team. For projects hosted by URL Hosting, the 24/7 on-call staff in the data center can be notified immediately for troubleshooting; completion time is still confirmed based on the cause of the fault and the service agreement.
Does vulnerability scanning mean a website is secure?
No. Scan results need to be interpreted and false positives eliminated before patching and retesting are arranged according to the risks; automated scanning is not equivalent to a complete penetration test. The frequency of execution and the need for third-party testing should be planned according to system risks, major updates, and contract requirements, and it cannot be guaranteed that there will be no vulnerabilities forever.
What is the difference between warranty and maintenance?
The warranty covers original delivery defects within the agreed scope and period; and maintenance and handling of ongoing operations, updates, and environmental changes. The coverage of new requirements, third-party changes, cybersecurity patching, and version upgrades must be agreed upon item by item and should not be universally considered as free warranty coverage.
First, take stock of the website, then select a maintenance plan.
Please prepare your website URL, system and hosting information, current issues, desired minor adjustments, and budget range. Do not provide passwords via regular email.
